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Listing of Claims f including amendments and status) ! 

1 1 . (Curretitly amended) An X.509 certificate stored on computer readable medium, said 

2 certificate capable of supporting more than one cryptographic algorithm with an associated 

3 public key , comprising: 

4 a signature algorithm and signature for all authenticated attributes using a first 

5 cryptographic algorithm; 

6 a[[ n al te rna t iv e p ublic -feey]] first certificate extension [[for]] identifying at least one 

7 alternative cryptographic algorithjn and providing a respective [[its]] associated public key; and 

8 a[[ n ahcrnAli^/e Aigudluic] ] second certificate extension [[for]] containing a signature for 

9 [[the]] each alternative cryptographic algorithm. 

1 2, (Currently amended) An X.509 certificate according to Claim 1, v^herein the first 

2 cryptographic algorithm is RSA and the alternative cryptographic algorithro is elliptic curve and 

3 the first and second certificate extensjott5 are identified as pon-critjcal . 

1 3, (Previously presented) An X.509 certificate according to Claim 1 , wherem the certificate can 

2 be verified by either the signature for the first cryptographic algorithm or the signature for the 

3 alternative signature algorithm. 

1 4. (Currently amended) A method for enabling an X.509 certificate to support more than one 

2 cryptographic algorithm, with associated public key^ said method comprising the. stftps oft 

3 providing the X.509 certificate with a signature algorithm and signature for all 

4 authenticated attributes using a first cryptographic algorithm; 
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5 providing the X.509 certificate with a[ [n alterna t ive public kty ]] first certificate extension 

6 [[for]] identifying at Iea$t one alternative cryptographic algorithm and providing [[its]] a 

7 respective associated public key; and 

8 providing the X.509 ceitlQcalt; with a[ [n al t ernative j>i^m t ur c ; ]] second certiticate 

9 extension which contains a signature for [[the]] each alternative cryptographic algorithm. 

1 5. (Currently amended) A method for enabling an X.iuy certiticate to support mor^ than one 

2 cryptographic algorithm according to Claim 4, wherein the first cryptographic algorithm 119 RSA 

3 and the alternative cryptographic algorithm is elliptic curve and the first and second certificate 

4 extensions a re indicated as non^critical . 

1 6. (Previously presented) A method for enabling an X.509 certificate to support more than one 

2 cryptographic algorithm according to Claim 4, wherein the certificate can be verified by either 

3 the signature for the first cryptographic algorithm or the signature for the alternative signature 

4 algorithm. 

1 7. (Currently amended) Computer readable code sturcU on computer readable media for enabling 

2 an X,509 certificate to support more than one cryptographic algorithm in association Avith a 

3 pubJic key > said computer readable code comprising: 

4 fu^t subprocesses for providing the K509 certificate with a signature algorithm and 

5 signature for all authenticated attributes using a first cryptographic algorithm; 

6 second subprocesses for providing the X.509 certificate wth a[[ n al t ernative public t r ey] ] 

7 first certificate extension for identifying at least one alternative cryptographic algorithm and 

8 providing its associated public key; and 

9 third subprocesses for providing the X.509 certificate with a[[n aJtcma l ivc slgiM l me ]] 
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10 second certilRcate extension which contains a signature for the alternative cryptographic 

11 algorithm, 

1 8. (Currently amended) Computer readable code for enabling an X.509 certificate to support 

2 more thaii unc crypLograpMc algorithm according to Claim 7, wherein the tirst cryptographic 

3 algorithm is RSA and the alternative cryptographic algorithm is elliptic curve an d the first anj 

4 second certificate extensions are identified as non-critical . 

1 9. (Previously presented) Computer readable code for enahling an X.509 certificate to support 

2 more than one cryptographic algorithm according to Claim 7, wherein the certificate can be 

3 verified by either tlie signature for the first cryptographic algorithm or the signature for the 

4 alternative fiign;^hire algorithm. 

5 10. hi a computing environment, a system for enabling an X,509 certificate to support more than 

6 one cryptographic algorithm> said system comprising: 

7 tneans for providing the X,509 certificate with a signature algorithm and signature for all 

8 autlienticated attiibutcs using a first CTyptographic algorithm; 

9 means for providing the X.509 certificate with a[[ n alternative public key ]] first 

1 0 certificate extension [lfot\\ identitying at least one alternative cryptographic algorithm and 

1 1 providing its associated public key; and 

1 2 means for providing the X.509 certificate with a[[ n alternative sigitatm - c ]] second 

1 3 certificate extension wliich contains a signature for the alternative cryptographic algorithm. 

1 1 1. (Currently amended) A system for enabling an X.509 certificate to support more than one 

2 cryptographic algorithm according to Claim 1 0> wherein the first cryptogiaphic algoi illuii is RSA 

3 and the alternative cryptographic algorithm is elliptic curve and the first and second certificate 
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4 extepsions a re indicated as noi>criticaL 

1 1 2. (Previously presented) A system for enabling an X,509 certificate to support more than one 

2 CTyptographic algorithm according to Claim 1 0, wherein the certificate can be verified by either 

3 the signature for the firet cryptogiapluc algurillun or the signature for the alternative signature 

4 algorithm. 


55er3.fll No. 0 Q/:>4n , !?! Docket 

PAGE 9/27' RCVD AT 9/27/2005 11:15:34 PM [Eastern Daylight r^^^ 


